Comment on SELinux rule affect other commands

This line affects every command run by the user, unlike everything else
in our policy which is just for vncserver/vncsession. It's easy to miss
this so add a comment pointing it out.

diff --git a/unix/vncserver/selinux/vncsession.te b/unix/vncserver/selinux/vncsession.te
index 5918e5a1d51d5b498cdf009f9315daf564ebe1e7..a773fed39d8c54027f42892a499cf29a84ddbae7 100644 (file)
--- a/unix/vncserver/selinux/vncsession.te
+++ b/unix/vncserver/selinux/vncsession.te
@@ -53,6 +53,7 @@ manage_lnk_files_pattern(vnc_session_t, xdm_home_t, xdm_home_t)
 userdom_user_home_dir_filetrans(vnc_session_t, xdm_home_t, dir, ".vnc")
 userdom_admin_home_dir_filetrans(vnc_session_t, xdm_home_t, dir, ".vnc")
 
+# This also affects other tools, e.g. vncpasswd
 userdom_admin_home_dir_filetrans(userdomain, xdm_home_t, dir, ".vnc")
 userdom_user_home_dir_filetrans(userdomain, xdm_home_t, dir, ".vnc")